Administración de Redes y Comunicaciones. Redes Escalables Cabrera Espinoza, Rodrigo. C20
Administración de Redes y Comunicaciones. Redes Escalables Cabrera Espinoza, Rodrigo. C20
G0/0/1.200 192.168.200.1/24
LAP-1 G0 DHCP
Objectives
In this lab, you will explore some of the features of a wireless LAN controller. You will create a
new WLAN on the controller and implement security on that LAN. Then you will configure a
wireless host to connect to the new WLAN through an AP that is under the control of the WLC.
Finally, you will verify connectivity.
• Connect to a wireless LAN controller GUI.
• Explain some of the information that is available on the WLC Monitor screen.
• Configure a WLAN on a wireless LAN controller.
• Implement security on a WLAN.
• Configure a wireless host to connect to a wireless LAN.
Background / Scenario
An organization is centralizing control of their wireless LAN by replacing their standalone access
points with lightweight access points (LAP) and a wireless LAN controller (WLC). You will be
leading this project and you want to become familiar with the WLC and any potential challenges
that may occur during the project. You will configure a WLC by adding a new wireless network
and securing it with WPA-2 PSK security. To test the configuration, you will connect a laptop to
the WLAN and ping devices on the network.
Instructions Part 1: Monitor the WLC
Wait until STP has converged on the network. You can click the Packet Tracer Fast Forward Time
button to speed up the process. Continue when all link lights are green.
a. Go the desktop of Admin PC and open a browser. Enter the management IP address of
WLC-1 from the addressing table into the address bar. You must specify the HTTPS
protocol.
b. Click Login and enter these credentials: User Name: admin, Password: Cisco123. After a
short delay, you will see the WLC Monitor Summary screen.
Note: Packet Tracer does not support the initial dashboard that has been demonstrated in this
module. c.
Scroll through the Monitor Summary screen.
c. Click Detail next to the All APs entry in the Access Point Summary section of the page.
What
information can you find about APs on the All APs screen?
Aquí se puede ver que el Wireless _ LAN tiene ahora un cliente el uso de
sus servicios
b. Enter the Profile Name of the new WLAN. Use the profile name Floor 2 Employees. Assign an
SSID of SSID-5 to the WLAN. Hosts will need to use this SSID to join the network.
c. Select the ID for the WLAN. This value is a label that will be used to identify the WLAN is other
displays. Select a value of 5 to keep it consistent with the VLAN number and SSID. This is not
a requirement but it helps with understanding the topology.
b. Click the Connect tab. After a brief delay you should see the SSID for the WLAN appear in the
table of wireless network names. Select the SSID-5 network and click the Connect button.
c. Enter the pre-shared key that you configured for the WLAN and click Connect.
d. Click the Link Information tab. You should see a message that confirms that you have
successfully connected to the access point. You should also see a wireless wave in the
topology showing the connection to LAP-1.
e. Click the More Information button to see details about the connection.
f. Close the PC Wireless app and open the IP Configuration app. Verify that Wireless Host has
received a non-APIPA IP address over DHCP. If not, click the Fast Forward Time button a few
times.
g. From Wireless Host, ping the WLAN default gateway and the Server to verify that the laptop
has full connectivity.
End of document
Packet Tracer - Configure a WPA2 Enterprise WLAN on the WLC
Addressing Table
R1 G0/0/0.5 192.168.5.1/24
R1
R1 G0/0/0.200 192.168.200.1/24
G0/0/1 172.31.1.1/24
LAP-1 G0 DHCP
Objectives
In this activity, you will configure a new WLAN on a wireless LAN controller (WLC), including the
VLAN interface that it will use. You will configure the WLAN to use a RADIUS server and WPA2-
Enterprise to authenticate users. You will also configure the WLC to use an SNMP server.
• Configure a new VLAN interface on a WLC.
• Configure a new WLAN on a WLC.
• Configure a new scope on the WLC internal DHCP server.
• Configure the WLC with SNMP settings.
• Configure the WLC to user a RADIUS server to authenticate WLAN users.
• Secure a WLAN with WPA2-Enterprise.
• Connect hosts to the new WLC.
Background / Scenario
You have already configured and tested the WLC with an existing WLAN. You configured WPA2-
PSK for that WLAN because it was to be used in a smaller business. You have been asked to
configure and test a WLC topology that will be used in a larger enterprise. You know that WPA2-
PSK does not scale well and is not appropriate to use in an enterprise network. This new
topology will use a RADIUS server and
WPA2Enterprise to authenticate WLAN users. This allows administration of the user accounts
from a central location and provides enhanced security and transparency because each account
has its own username and password. In addition, user activity is logged on the server.
In this lab, you will create a new VLAN interface, use that interface to create a new WLAN, and
secure that WLAN with WPA2-Enterprise. You will also configure the WLC to use the enterprise
RADIUS server to authenticate users. In addition, you will configure the WLC to use a SNMP
server.
c. Click the Questions: management Interface. Record its addressing information here.
IP address:
Type your answers here.
Netmask:
Type your answers here.
Gateway:
Type your answers here.
Primary DHCP server:
d. We want the WLC to use its own DHCP sever to provide addressing to devices on the wireless
management network, such as lightweight APs. For this reason, enter the IP address of the
WLC management interface as the primary DHCP server address. Click Apply. Click OK to
acknowledge any warning messages that appear.
e. In the left-hand menu, expand the Internal DHCP Server section. Click DHCP Scope.
f. To create a DHCP scope, click the New… button.
g. Name the scope Wired Management. You will configure this DHCP scope to provide
addresses to the wired infrastructure network that connects the Admin PC, WLC-1, and LAP-1.
h. Click Apply to create the new DHCP scope.
i. Click the new scope in the DHCP Scopes table to configure addressing information for the
scope. Enter the following information.
Pool Start Address: 192.168.200.240
Pool End Address: 192.168.200.249
Status: Enabled
Provide the values for Network, Netmask, and Default Routers from the information you
gathered in Step 1c.
j. Click Apply to activate the configuration. Click Save Configuration in the upper-right-hand
corner of the WLC interface to save your work so that it is available when the WLC restarts.
The internal DHCP server will now provide an address to LAP-1 after a brief delay.
When LAP-1 has its IP address, the CAPWAP tunnel will be established and LAP-1 will be able to
provide access to the Floor 2 Employees (SSID-5) WLAN. If you move the mouse over LAP-1 in
the topology, you should see its IP address, the status of the CAPWAP tunnel, and the WLAN that
LAP-1 is providing access to.
j. Confirm that Wireless Host has connected to the WLAN. Wireless Host should receive an IP
address from the DHCP server that is configured for hosts on R1. The address will be in the
192.168.5.0/24 network.
You may need to click the Fast Forward Time button speed up the process.
a. Close the PC Wireless app.
b. Open a command prompt and confirm that Wireless Host laptop has obtained an IP address
from the
WLAN network. Question:
LAN 192.168.6.1/27
RTR-1
G0/0/0.5 192.168.5.1/24
G0/0/0.100 192.168.100.1/24
RTR-1
G0/0/1 10.6.0.1/24
RTR-1
LAP-1 G0 DHCP
WLAN Information
WLAN SSID Authentication Username Password
Objectives
In this activity, you will configure both a wireless home router and a WLC-based network. You will
implement both WPA2-PSK and WPA2-Enterprise security.
• Configure a home router to provide Wi-Fi connectivity to a variety of devices.
• Configure WPA2-PSK security on a home router.
• Configure interfaces on a WLC.
• Configure WLANs on a WLC.
• Configure WPA2-PSK security on a WLAN and connect hosts to WLAN.
• Configure WPA2-Enteprise on a WLAN and connect hosts to the WLAN.
• Verify connectivity WLAN connectivity.
Background / Scenario
You will apply your WLAN skills and knowledge by configuring a home wireless router and an
enterprise WLC. You will implement both WPA2-PSK and WPA2-Enterprise security. Finally, you
will connect hosts to each WLAN and verify connectivity.
Instructions
Part 1: Configure a Home Wireless Router.
You are installing a new home wireless router at a friend’s house. You will need to change
settings on the router to enhance security and meet your friend’s requirements.
Status
a. The network will use the 2.4GHz Wireless LAN interface. Configure the interface with the SSID
shown in the Wireless LAN information table.
b. Use channel 6.
c. Be sure that all wireless hosts in the home will be able to see the SSID.
b. Open the Config tab on the Tablet PC and Smartphone and configure the wireless interfaces
to connect to the wireless network.
c. Verify connectivity. The hosts should be able to ping each other and the web server. They
should also be able to reach the web server URL.
SE REALIZO EL PING DE LAPTOP A SMARPHONE
PING A WWW.NETACAD.PT
Part 2: Configure a WLC Controller Network
Configure the wireless LAN controller with two WLANs. One WLAN will use WPA2-PSK
authentication. The other WLAN will use WPA2-Enterprise authentication. You will also configure
the WLC to use an SNMP server and configure a DHCP scope that will be used by the wireless
management network.
Name: WLAN 2
VLAN Identifier: 2
Port Number: 1
Interface IP Address: 192.168.2.254
Netmask: 255.255.255.0
Gateway: RTR-1 G0/0/0.2 address
Primary DHCP Server: Gateway address
c. Configure an interface for the second WLAN.
Name: WLAN 5
VLAN Identifier: 5
Port Number: 1
Interface IP Address: 192.168.5.254
Netmask: 255.255.255.0
Gateway: RTR-1 interface G0/0/0.5 address Primary
DHCP Server: Gateway address
• Logré comprender que para poder crear y habilitar es necesario hacer clic en WLAN en la barra de
menú de WLC en donde se crea una nueva WLAN y se selecciona el ID para la WLAN que se usa
para identificar la WLAN en otras pantallas.
• Logré comprender que para configurar un enrutador domestico es necesario cambiar la configuración
del router para mejorar la seguridad y cumplir los requisitos.
• Al realizar el laboratorio vi que usamos la interfaz WLC para ver una imagen general de la información
y rendimiento del sistema de AP así como acceder a configuraciones avanzadas y configurar un WLAN
• Logre comprender que se realizó la configuración de la WLAN para usar un servidor RADIUS y WPA2-
Enterprise para la autenticación de los usuarios.
• Observé que para configurar un alcance de DHCP y SNMP primeramente se configura un alcance
DHCP en donde la WLC ofrece su propio servidor DHCP interno , pero si en redes más pequeñas el
servidor DHCP puede utilizarse para proporcionar direcciones IP a los LAP que estén conectados a
la red de gestión cableada.